ory

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

ory records in CISA KEV

No ory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fosite 4 records LOW Oathkeeper 4 records MEDIUM Hydra 3 records LOW Keto 1 record LOW Kratos 1 record LOW Polis 1 record LOW

Records

3 records in Hydra · all components

TI-2026-25900 CVE-2026-33504 · GHSA-r9w3-57w2-gch2

Ory Hydra has a SQL injection via forged pagination tokens

LOW 34

Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00364 Published 2026-03-26 Fixed in 26.2.0, 2.3.1-0.20260320110106-0b84568fffcc CWE-89

TI-2019-06030 CVE-2019-8400 · GHSA-7v6r-w4r6-mhch

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.

LOW 30

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01328 Published 2019-02-17 Fixed in 1.4.8 CWE-79

TI-2020-04356 CVE-2020-5300 · GHSA-3p3g-vpw6-4w66

Disallow replay of `private_key_jwt` by blacklisting JTIs in Hydra

LOW 28

In Hydra (an OAuth2 Server and OpenID Certified™ OpenID Connect Provider written in Go), before version 1.4.0+oryOS.17, when using client authentication method 'private_key_jwt' [1], OpenId specification says the followi…

CVSS 3.1MEDIUM 5.8 Network Low privileges User interaction EPSS 0.01028 Published 2020-04-06 Fixed in 1.4.0+oryOS.17, 1.4.0 CWE-294

Open these records in search →

Critical	1
High	8
Medium	6
Low	0
No CVSS	0